Cloud services are designed to constantly introduce new and release changes to existing services, so that businesses can leverage these innovations and remain competitive in today’s fast paced digital economy. However, the continuous delivery of service updates thrives a challenge to follow the classic validation and qualification approach.
Situation
A regulated company uses cloud service models for a GxP software application.
Challenge
The software must be continuously validated and the validated state must be maintained in the cloud, even if changes are made by the cloud service provider outside of the companies´ change management processes.
Solution
The compliance perspective must change:
p36 provides a service of continuous cloud service qualification which is a risk-based approach to continuously qualify SAP BTP services for their intended use in the software application.
Our Service Qualification Platform performs integrated and automated testing to detect and respond to changes to the SAP BTP if required.
The testing procedure is performed using a methodology consisting of various elements such as a software application assessment, a functional service assessment, a functional service risk assessment and a test strategy definition, which is outlined in a service qualification plan. Based on the plan, the infrastructure gets qualified initially and then continuously examined.
Our Service Qualification Platform (SQP) as supporting software enables you to manage
The Service Qualification Platform
In cases of deviations, the SQP automatically notifies authorized clients through service desk tickets.
Review application and requirements from a business perspective and review overall architecture of IT system and solution
Define intended use of BTP services and define requirements from application perspective towards BTP services according to investigation
Conduct functional risk assessment for used BTP services based on requirements
Investigation and definition of test strategy regarding BTP services based on software application setup
Automatic verification runs and creation of verification reports containing full traceability matrix
Monitoring and alerting in case of deviations from the expected test outcome
Access to third-party systems for Application Lifecycle Management (ALM) or any other system used in the validation process to link requirements and test reports